#!/bin/bash

# 设置脚本在遇到错误时立即退出
set -e

[ "$(id -u)" -ne 0 ] && { echo "必须以 root 用户身份运行此脚本。"; exit 1; }

# 检查 tuned-adm 命令是否存在，如果存在则执行
if command -v tuned-adm &> /dev/null; then
    tuned-adm profile network-latency
else
    echo "Warning: The 'tuned-adm' command is not available."
fi

# EPB not enabled on this platform
#x86_energy_perf_policy performance

###################### core ###################
echo "# 开始检查内核参数..."
# limits.conf
declare -r LIMITS_CONF_APPEND='
* soft core unlimited
* hard core unlimited
'
if ! grep -qE '\* soft core unlimited|\* hard core unlimited' /etc/security/limits.conf; then
    echo "$LIMITS_CONF_APPEND" >> /etc/security/limits.conf
else
    echo "The limits have already been set in /etc/security/limits.conf"
fi

ulimit -c unlimited


###################### rc.local ###################
echo "# 开始检查rc.local..."
# rc.local
if [ ! -f "/etc/rc.d/rc.local" ]; then
    echo "Error: /etc/rc.d/rc.local file does not exist. Aborting."
    exit 1
fi
chmod +x /etc/rc.d/rc.local

ETHTOOL_COMMANDS=(
    "ethtool -G p1p1 rx 2048 tx 2048"
    "ethtool -G ens1f0 rx 2048 tx 2048"
    "ethtool -C ens1f0 rx-usecs 0 rx-usecs-irq 0 adaptive-rx off"
    "ethtool -C p1p2 rx-usecs 0 rx-usecs-irq 0 adaptive-rx off"
)
# 检查 rc.local 文件中是否已包含相应行，如果没有则追加
for cmd in "${ETHTOOL_COMMANDS[@]}"; do
    if ! grep -Fxq "$cmd" /etc/rc.d/rc.local; then
        echo "$cmd" >> /etc/rc.d/rc.local
    fi
done

###################### GRUB ###################
## TODO: 这个需要手工操作
echo "# 开始检查GRUB..."
# 设置GRUB 引导参数

# 读取当前GRUB_CMDLINE_LINUX值
CURRENT_CMDLINE=$(grep GRUB_CMDLINE_LINUX /etc/default/grub | cut -d '"' -f2)

# 获取系统CPU核心数
CPU_COUNT=$(nproc)

# 要检查和添加的配置项
ADDITIONAL_OPTS="ipv6.disable=1 selinux=0 isolcpus=1-$((CPU_COUNT-1)) nohz_full=1-$((CPU_COUNT-1)) transparent_hugepage=never default_hugepagesz=1G hugepagesz=1G hugepages=32 intel_idle.max_cstate=0 processor.max_cstate=0 idle=poll intel_iommu=off nosoftlockup mce=ignore_ce nmi_watchdog=0 pcie_aspm=off nohz=off audit=0"

# 需要检查的配置项列表（排除isolcpus和nohz_full）
CHECK_OPTS="ipv6.disable=1 selinux=0 transparent_hugepage=never default_hugepagesz=1G hugepagesz=1G hugepages=32 intel_idle.max_cstate=0 processor.max_cstate=0 idle=poll intel_iommu=off nosoftlockup mce=ignore_ce nmi_watchdog=0 pcie_aspm=off nohz=off audit=0"

# 检查并添加配置项
for opt in $CHECK_OPTS; do
    if [[ ! $CURRENT_CMDLINE =~ $opt ]]; then
        CURRENT_CMDLINE+=" $opt"
    fi
done

# 特别处理 isolcpus 和 nohz_full
if [[ ! $CURRENT_CMDLINE =~ isolcpus= ]]; then
    CURRENT_CMDLINE+=" isolcpus=1-$((CPU_COUNT-1))"
fi
if [[ ! $CURRENT_CMDLINE =~ nohz_full= ]]; then
    CURRENT_CMDLINE+=" nohz_full=1-$((CPU_COUNT-1))"
fi

# 更新GRUB_CMDLINE_LINUX
#awk -v cmdline="${CURRENT_CMDLINE}" 'BEGIN{FS="=";OFS="="} $1 == "GRUB_CMDLINE_LINUX" {$2 = "\""cmdline"\""} 1' /etc/default/grub | tee /etc/default/grub > /dev/null

# 重启grub配置
#update-grub

#######################  大页检查 ########################
echo "# 开始检查大页..."

# 检查 HugePages 是否启用
HUGE_PAGES_TOTAL=$(grep -i HugePages_Total /proc/meminfo | awk '{print $2}')
if [ "$HUGE_PAGES_TOTAL" -eq 0 ]; then
    echo "Error: HugePages are not enabled or configured properly."
else
    echo "HugePages are enabled with a total of $HUGE_PAGES_TOTAL pages."
fi

# 检查 hugetlbfs 是否挂载
if ! mount | grep -q hugetlbfs; then
    echo "Error: hugetlbfs is not mounted."
else
    echo "hugetlbfs is correctly mounted."
fi

# 如果 HugePages 没有启用或 hugetlbfs 没有挂载，进行配置
if [ "$HUGE_PAGES_TOTAL" -eq 0 ] || ! mount | grep -q hugetlbfs; then
    echo "Configuring HugePages..."

    # 更新内核参数
    grubby --update-kernel=ALL --args="default_hugepagesz=1G hugepagesz=1G hugepages=4"

    # 检查配置是否成功
    if grubby --info=ALL | grep -q "default_hugepagesz=1G"; then
        echo "HugePages configuration updated successfully."

        # 尝试挂载 hugetlbfs
        mkdir -p /dev/hugepages
        mount -t hugetlbfs nodev /dev/hugepages

        if mount | grep -q hugetlbfs; then
            echo "hugetlbfs mounted successfully."
        else
            echo "Error: Failed to mount hugetlbfs."
        fi
    else
        echo "Error: Failed to update HugePages configuration."
    fi
fi

#######################  检查虚拟网卡 ########################
echo "# 开始检查并删除虚拟网卡..."

set +e
systemctl stop libvirtd.service 2>/dev/null
systemctl disable libvirtd.service 2>/dev/null
set -e

# 检查 virbr0 网桥是否存在
if ifconfig virbr0 &> /dev/null; then
    echo "virbr0 exists."
    # 如果存在，可以在此处添加删除 virbr0 的命令
    # 因为 libvirt 会在需要时自动重建它
    # 可以考虑使用 libvirt 的工具来管理网络，例如 'virsh net-destroy default'
else
    echo "virbr0 does not exist."
fi

####################### selinux ########################
echo "# 开始关闭SELINUX..."

# 检查 SELinux 当前的状态
current_selinux_status=$(grep ^SELINUX= /etc/selinux/config | awk -F "=" '{print $2}' | tr -d ' ')

# 如果 SELinux 不是 disabled 状态，则进行修改
if [ "$current_selinux_status" != "disabled" ]; then
    # 备份原来的配置文件
    cp /etc/selinux/config /etc/selinux/config.bak

    # 使用 sed 命令更新 SELINUX 参数为 disabled
    sed -i 's/^SELINUX=.*/SELINUX=disabled/' /etc/selinux/config

    echo "SELinux has been set to disabled."
else
    echo "SELinux is already disabled."
fi

#######################  网络低延迟 ########################
echo "# 开始设置网络低延迟..."

cd /proc/sys/net/ipv4
sysctl -w net.core.rmem_default=134217728
sysctl -w net.core.rmem_max=134217728
sysctl -w net.core.wmem_default=134217728
sysctl -w net.core.wmem_max=134217728
sysctl -w net.ipv4.udp_mem="134217728 134217728 268435456"
sysctl -w net.ipv4.udp_rmem_min=134217728
sysctl -w net.ipv4.udp_wmem_min=134217728

sh -c 'echo "net.ipv4.tcp_low_latency = 0" >> /etc/sysctl.conf'
sh -c 'echo "vm.nr_hugepages=4096" >> /etc/sysctl.conf'
sh -c 'echo "net.core.rmem_default=134217728" >> /etc/sysctl.conf'
sh -c 'echo "net.core.rmem_max=134217728" >> /etc/sysctl.conf'
sh -c 'echo "net.core.wmem_default=134217728" >> /etc/sysctl.conf'
sh -c 'echo "net.core.wmem_max=134217728" >> /etc/sysctl.conf'
sh -c 'echo "net.ipv4.udp_mem=134217728 134217728 268435456" >> /etc/sysctl.conf'
sh -c 'echo "net.ipv4.udp_rmem_min=134217728" >> /etc/sysctl.conf'
sh -c 'echo "net.ipv4.udp_wmem_min=134217728" >> /etc/sysctl.conf'
sh -c 'echo "net.core.netdev_max_backlog=4000" >> /etc/sysctl.conf'

sysctl -p /etc/sysctl.conf

####################### 关闭服务 ########################
echo "# 开始关闭各种无用的服务..."

set +e

systemctl set-default multi-user.target
systemctl disable firewalld.service
systemctl stop firewalld.service

systemctl stop libvirtd.service
systemctl disable libvirtd.service
systemctl stop iptables.service
systemctl stop firewalld.service
systemctl stop irqbalance.service
systemctl stop abrt-ccpp.service
systemctl stop abrt-oops.service
systemctl stop abrt-xorg.service
systemctl stop abrtd.service
systemctl stop alsa-state.service
systemctl stop cups.service
systemctl stop ModemManager.service
systemctl stop postfix.service
systemctl disable firewalld.service
systemctl disable iptables.service
systemctl disable irqbalance.service
systemctl disable alsa-state.service
systemctl disable cups.service
systemctl disable ModemManager.service
systemctl disable postfix.service
systemctl stop cpuspower
systemctl stop firewalld

#chkconfig NetworkManager off
#chkconfig --del NetworkManager

set -e


# 检查 tuned-adm 命令是否存在，如果存在则执行
if command -v tuned-adm &> /dev/null; then
    tuned-adm profile network-latency
else
    echo "Warning: The 'tuned-adm' command is not available."
fi

####################### SSH配置 ########################
echo "# 开始配置SSH服务..."
ssh_options="ClientAliveInterval 30
ClientAliveCountMax 10"

# 检查这些行是否已存在于 sshd_config 文件中
if ! grep -qxF "[[:space:]]*ClientAliveInterval 30" /etc/ssh/sshd_config ||
   ! grep -qxF "[[:space:]]*ClientAliveCountMax 10" /etc/ssh/sshd_config; then
    # 如果不存在，则添加到文件的末尾
    echo -e "$ssh_options" >> /etc/ssh/sshd_config
    echo "Options added to /etc/ssh/sshd_config"
else
    echo "Options already present in /etc/ssh/sshd_config"
fi

# 重启 SSH 服务
systemctl restart sshd

####################### SSH配置 ########################
echo "# 开始添加用户boyi_trader..."
useradd boyi_trader

echo "DONE! PLS RESTART!"